Privacy Policy

This privacy policy explains how Calrissia BV collects, uses, and protects your personal data when you visit and use our website. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Who we are

Calrissia BV is a company registered in Belgium with company number BE 0745.920.709. Our registered office is located at Elsum 68, 2440 Geel, Belgium. We are the data controller responsible for your personal data when you use our website.

What personal data we collect

We collect the following categories of personal data:

  • Contact information — When you contact us through our website or place an order, we collect your name, email address, phone number, and company details.
  • Technical information — We automatically collect information about your device, browser, IP address, and how you interact with our website through cookies and similar technologies.
  • Order information — When you place an order, we collect information about the services you purchase, payment details, and billing information.

How we use your personal data

We use your personal data for the following purposes:

  • To provide and manage the services you request
  • To process your orders and payments
  • To communicate with you about your orders and our services
  • To improve our website and services through analytics
  • To comply with our legal and regulatory obligations
  • To protect our rights and the rights of our users

Legal basis for processing

We process your personal data based on the following legal grounds:

  • Performance of a contract — When processing is necessary to provide the services you requested or to fulfill our contractual obligations.
  • Legitimate interests — When processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, or ensuring network security.
  • Consent — When you have given us explicit consent to process your personal data for specific purposes, such as marketing communications.
  • Legal obligation — When processing is necessary to comply with our legal obligations.

Data sharing with third parties

We may share your personal data with the following categories of third parties:

  • Service providers — Companies that provide services on our behalf, such as payment processors, hosting providers, and analytics services (Google Analytics, Google Tag Manager, Plausible).
  • Legal and regulatory authorities — When required by law or to protect our rights.
  • Business partners — With your consent, we may share your information with partners who help us deliver our services.

We ensure that all third parties with whom we share your data are contractually obligated to protect your personal data and process it only for the purposes we specify.

International data transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your personal data internationally, we ensure appropriate safeguards are in place, such as:

  • Using service providers in countries that have been deemed to provide an adequate level of protection by the European Commission
  • Implementing standard contractual clauses approved by the European Commission
  • Relying on other appropriate safeguards recognized under GDPR

Data retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our retention periods are as follows:

  • Order and customer data: 7 years from the end of the business relationship (for tax and accounting purposes)
  • Marketing data: Until you withdraw your consent or request deletion
  • Analytics data: 26 months (for Google Analytics data)

Your rights under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right of access — You have the right to request access to the personal data we hold about you.
  • Right to rectification — You have the right to request correction of inaccurate or incomplete personal data.
  • Right to erasure — You have the right to request deletion of your personal data in certain circumstances.
  • Right to restrict processing — You have the right to request restriction of the processing of your personal data in certain circumstances.
  • Right to data portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object — You have the right to object to the processing of your personal data in certain circumstances.
  • Right to withdraw consent — Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month. If your request is complex or we receive a large number of requests, we may extend this period by up to two additional months.

Cookies and tracking technologies

We use cookies and similar tracking technologies to enhance your experience on our website and to collect analytics data. For detailed information about the cookies we use and how to manage your cookie preferences, please refer to our Cookie Policy.

Data security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication mechanisms
  • Employee training on data protection and security

Children's privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have collected personal data from a child under 16, please contact us immediately so we can take appropriate action.

Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last updated" date at the top of this policy. If we make material changes that affect your rights, we will provide more prominent notice or seek your consent as required by law.

Contact information

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at:

Calrissia BV
Elsum 68
2440 Geel
Belgium

Email: info@calrissia.com
Tel: +32 (0)14 49 75 14

Supervisory authority

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Belgium, the supervisory authority is:

Gegevensbeschermingsautoriteit (Data Protection Authority)
Drukpersstraat 35, 1000 Brussels, Belgium
Tel: +32 (0)2 274 48 00
Email: contact@apd-gba.be
Website: https://www.dataprotectionauthority.be